Lucene search
Veracode Vulnerability DatabaseVERACODE:6361HistoryMay 23, 2018 - 7:50 a.m.
Remote Code Execution (RCE)
2018-05-2307:50:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
58.5%
libfontforge.so is vulnerable to remote code execution (RCE) attacks. The application does not properly validate strings in the BROWSER environment variable, allowing a malicious user to inject and execute arbitrary commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libfontforge.so | eq | 1.0.0 |
Related
prion
prion
Design/Logic Flaw
2017-12-14 16:29:00
Design/Logic Flaw
2017-12-14 16:29:00
debiancve
debiancve
CVE-2017-17521
2017-12-14 16:29:00
cve
cve
CVE-2017-17521
2017-12-14 16:29:00
CVE-2017-17534
2017-12-14 16:29:01
ubuntucve
ubuntucve
CVE-2017-17521
2017-12-14 00:00:00
CVE-2017-17534
2017-12-14 00:00:00
osv
osv
CVE-2017-17521
2017-12-14 16:29:00
redhatcve
redhatcve
CVE-2017-17521
2017-12-14 20:49:40
cvelist
cvelist
CVE-2017-17534
2017-12-14 16:00:00
CVE-2017-17521
2017-12-14 16:00:00
nvd
nvd
CVE-2017-17521
2017-12-14 16:29:00
CVE-2017-17534
2017-12-14 16:29:01
nessus
nessus
RHEL 7 : fontforge (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 6 : fontforge (Unpatched Vulnerability)
2024-06-03 00:00:00